mirror of
https://github.com/valitydev/helmsdeep.git
synced 2024-11-06 08:55:21 +00:00
131 lines
3.4 KiB
YAML
131 lines
3.4 KiB
YAML
# -*- mode: yaml -*-
|
|
|
|
replicaCount: 1
|
|
|
|
image:
|
|
repository: {{ .Values.services.global.registry.repository | default "docker.io/rbkmoney" }}/hooker
|
|
tag: aeffeedb13a8f5125962bfe3e0e734ba4104d876
|
|
pullPolicy: IfNotPresent
|
|
|
|
{{ if .Values.services.global.registry.imagePullSecret }}
|
|
imagePullSecrets:
|
|
- {{ .Values.services.global.registry.imagePullSecret }}
|
|
{{ end }}
|
|
|
|
runopts:
|
|
command: ["/opt/hooker/entrypoint.sh"]
|
|
|
|
configMap:
|
|
data:
|
|
entrypoint.sh: |
|
|
{{- readFile "entrypoint.sh" | nindent 6 }}
|
|
loggers.xml: |
|
|
{{- readFile "loggers.xml" | nindent 6 }}
|
|
logback.xml: |
|
|
{{- readFile "../logs/logback.xml" | nindent 6 }}
|
|
|
|
volumes:
|
|
- name: config-volume
|
|
configMap:
|
|
name: {{ .Release.Name }}
|
|
defaultMode: 0755
|
|
|
|
volumeMounts:
|
|
- name: config-volume
|
|
mountPath: /opt/hooker/entrypoint.sh
|
|
subPath: entrypoint.sh
|
|
readOnly: true
|
|
- name: config-volume
|
|
mountPath: /opt/hooker/logback.xml
|
|
subPath: logback.xml
|
|
readOnly: true
|
|
- name: config-volume
|
|
mountPath: /opt/hooker/loggers.xml
|
|
subPath: loggers.xml
|
|
readOnly: true
|
|
|
|
service:
|
|
ports:
|
|
- name: api
|
|
port: 8022
|
|
- name: management
|
|
port: 8023
|
|
|
|
livenessProbe:
|
|
httpGet:
|
|
path: /actuator/health
|
|
port: management
|
|
|
|
readinessProbe:
|
|
httpGet:
|
|
path: /actuator/health
|
|
port: management
|
|
|
|
podAnnotations:
|
|
vault.hashicorp.com/role: "db-app"
|
|
vault.hashicorp.com/agent-inject: "true"
|
|
vault.hashicorp.com/agent-inject-secret-application.properties: "database/creds/db-app-hooker"
|
|
vault.hashicorp.com/agent-inject-template-application.properties: |
|
|
{{`{{- with secret "database/creds/db-app-hooker" -}}
|
|
spring.datasource.url=jdbc:postgresql://postgres-postgresql:5432/hooker?sslmode=disable
|
|
spring.datasource.username={{ .Data.username }}
|
|
spring.datasource.password={{ .Data.password }}
|
|
spring.flyway.url=jdbc:postgresql://postgres-postgresql:5432/hooker?sslmode=disable
|
|
spring.flyway.user={{ .Data.username }}
|
|
spring.flyway.password={{ .Data.password }}
|
|
{{- end }}`}}
|
|
|
|
metrics:
|
|
serviceMonitor:
|
|
enabled: {{ .Values.services.global.metrics.enabled }}
|
|
namespace: {{ .Release.Namespace }}
|
|
additionalLabels:
|
|
release: prometheus
|
|
endpoints:
|
|
- port: "management"
|
|
path: /actuator/prometheus
|
|
scheme: http
|
|
|
|
ciliumPolicies:
|
|
- filters:
|
|
- port: 5432
|
|
type: TCP
|
|
name: postgres
|
|
namespace: {{ .Release.Namespace }}
|
|
- filters:
|
|
- port: 9092
|
|
rules:
|
|
kafka:
|
|
- role: consume
|
|
topics:
|
|
- mg-events-customer
|
|
- mg-events-invoice
|
|
type: TCP
|
|
name: kafka
|
|
namespace: {{ .Release.Namespace }}
|
|
- filters:
|
|
- port: 8200
|
|
type: TCP
|
|
name: vault
|
|
namespace: {{ .Release.Namespace }}
|
|
- filters:
|
|
- port: 8022
|
|
type: TCP
|
|
name: hellgate
|
|
namespace: {{ .Release.Namespace }}
|
|
- filters:
|
|
- port: 8022
|
|
type: TCP
|
|
name: fault-detector
|
|
namespace: {{ .Release.Namespace }}
|
|
|
|
##In case of kafka mTLS auth move it to vault template
|
|
# {{- /*
|
|
# kafka.ssl.enabled={{ kafka.ssl.enable }}
|
|
# kafka.ssl.key-store-location=/opt/{{ service_name }}/kafka-keystore.p12
|
|
# kafka.ssl.key-store-password="{{ service.keystore.pass }}"
|
|
# kafka.ssl.key-password="{{ service.keystore.pass }}"
|
|
# kafka.ssl.trust-store-location=/opt/{{ service_name }}/kafka-truststore.p12
|
|
# kafka.ssl.trust-store-password="{{ kafka.truststore.java.pass }}"
|
|
# */ -}}
|